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Specification 
Title of the Invention 
'Authentication Method 

Background of the Invention - 

The present invention relates to an 
authentication method for a mobile communication system, 

In a conventional authentication method, as 
shown in Fig. 7 , upon reception' of an originating 
request from a mobile station, a parent station 
.{corresponding to a unit including the base station and 
the mobile. station controller in the present invention) 
- supplies an identification number (corresponding to a 
mobile station identification number in the present 
15 invention), as a set parameter, to a data base 
(corresponding to the data base in the present 
invention) . 

The data base sends mobile station 
authentication information to the parent station. The 
parent station then sends a CALL PROC signal to the 
mobile station. Subsequently, the parent station 
transmits a random n;imber generated therein, as. an 
authentication random number, to the mobile station, so 
as to send an authentication request ( corresponding, to 
25- an authentication calculation request in the present 

invention), thus obtaining an authentication calculation 
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. :resul-.t: contained .:xn £an a'uthen-ti.cation .response :sent :'f rom 
^the 'luobOe :s,ta±u:on-. 

-T.or ^e^cample., .this method' ±s described as a :PMT 
:signaling method in Tabusaki -et al . , "PMT Signaling- 
Protocol", TECHNICAL REPORT OF.IEICE, THE INSTITUTE OF 
ELECTROKICSv INFORMATION AND -COmUNICATION ENGINEERS; 
(SSE92 - 75) pp. 43 - 50. ■ 

The following method is also specified.' As 
shown* in "Figs. 8 and 9, a plurality of authentication 
random numbers and a plurality of authentication 
calculation results corresponding thereto are stored in 
a memory in advance, and a pair of an authentication 
random number and an authentication calculation result 
are read out when authentication is required. An 
authentication calculation request is then supplied to a 
mobile station by using the authentication random number 
as a set parameter, .and an authentication calculation 
result as a response/is collated with . the corresponding 
authentication calculation' result stored in the memory. \ 
If the collation result indicates coincidence, it is 
determined that authentication confirmation is made. 

This method is described in "Security Related 
Network Function; Recoinmendation GSM 03.20 Version: 
3.3.2 Date: January 1991". More specifically, referring 
to Fig. 8, when a BS (Base Station) /MSG (Mobile 
Switching Center) /VLR (Visitor Location Register) 
requires authentication related information of a mobile 
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station, the BS/MSC/YIiR -transmivts ;a .xeguest (Security 
Related Information ;Reguest) .-signal to an ;HLR (Home 
Location Register) /AC (Authentication Center.).. 

■ Upon reception of the signal, "the HLR/RC 
calculates a plurality of authentication calculation, 
results SRES (1,. 2,..., n)' by using information Ki 
(corresponding authentication key in the present 
invention) of a target mobile station and a plurality of 
random numbers RAND (1, 2,..., n) generated in the 
HLR/AC as input parameter according to an authentication 
algorithm A3 (corresponding to an authentication 
algorithm in the present invention). 

Subsequently, the plurality of authentication 
random numbers and the plurality of authentication 
15 calculation results generated in the HLR/AC are sent, as 
set parameters of a response (Authentication Vector 
Response) signal, to the BS/MSC/VLR. 

The BS/MSC/VLR stores the received random 
numbers and authentication calculation results in the 
internal memory device. If authentication of the mobile- 
station (corresponding to the mobile station in the 
present invention) is required afterward, an 
authenticating operation is performed by the following 
procedure shown in Fig. 9. The BS/MSC/VLR selects a 
25 pair of an authentication random nximber RAND(j) and an 

authentication calculation result .SRES ( j ) for the target 
mobile station, and transmits an- authentication request 
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('"Authen.tl cation :-Reguesr" :corre spending -;to -an 
authentication calculation .request :in 'the :present 
invention ) :signal to the mobile .-station :by using -the 
authentication random number PIAI^D ( j ) as a set, parameter. 

-At this time^ the mobile station uses an 
authentication key and an authentication random number 
(RAlvID(j)), set therein, as input parameters to perform 
an authentication calculation^ and sends the . 
authentication calculation result to the BS/MSC/VLR. 

The BS/MSC/VLR collates the' authentication 
calculation result SRES(j) selected in advance with the 
authentication calculation result sent from the mobile 
station. If the collation result indicates coincidence^ 
the BS/HSC/VLR determines that authentication 
confirmation is made. 

In the former authentication method, when the 
parent station sends an originating information read 
request to the data base, the data base sends an 
originating information read response signal, as a 
response, to the parent station, and mobile station 
authentication information is contained in a set 
parameter of the originating information read response 
signal. For this reason, the third person may obtain 
mobile station authentication information corresponding 
to a mobile station number (IMSE) by intercepting a 
signal transmitted/received between the parent station 
and the data base via a communication line, or by 



•transmiTt'txng 'a*n .i'niLormation :rea'd :regue:s,t t'o :.t:he data 
.base.. 

'In 'the -lat'ter authentication *Tnethbd/ the 
BS/MS'C/VLR n-eeds to incorporate a memory -'function to 
store a plurality of authentication .calculation result 
corresponding to a plurality of authentication random 

numbers for the respective mobile stations with which 

the BS/HSC/VLR is associated. 

Summary of the Invention 

It is, therefore an object of the preferred embodiment 

present invention to provide an authentication method 

which can prevent interception of identification data 

associated with a mobile station. 

It is another object of that embodiment 
to provide an authentication method which does not 

require any means for storing an authentication random 

number corresponding to each mobile station and a 

corresponding authentication calculation result" in 

advance . 

According to one aspect of the invention there is provided an 
authentication system including a mobile station having 

an authentication key used for authentication and an 

authentication algorithm for performing an 

authentication calculation by using an authentication 

random number transmitted from a base station and the 

authentication key as input information; the base 

station having a mechanism for generating an 
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:authen±ica.tion jrandom jiuiriber cand .means :f ox .transmitting 
■the ^authentication .random number,, -an -authentication 
calculation -result obtained :by transmitting, the 
authentication random number to the mobile station, and 
a mobile station identification number to a mobile 
station controller, the mobile station controller having 
a mechanism for collating an authentication calculation 
result, obtained by transmitting the mobile station 
identification number and the authentication random 
number transmitted from' the base station to a data base, 
with an authentication calculation result transmitted . 
from the base station, and the data base having an 
authentication key used for authentication, an • 
authentication algorithm for performing an 
15 authentication calculation by using the received 

authentication random number and the authentication key 
as input information, and a mechanism for sending an 
authentication- calculation result, an authentication 
method comprises the steps of generating an 
authentication calculation request with respect to the 
mobile station with a random number generated by the 
base station being used as an authentication random 
number when the base station determines that 
authentication is required, receiving an authentication 
calculation result as a response from the mobile station 
at the base station, and causing the base station to 
start the mobile station controller by using the 
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r'au.then-ti-caxion :randoir. -number:, t:he :aut-hen.tica'tion 
:calculat-ion rresult , .and .the .identification :number .:of -the 
.mobile .station ,-as .set :paraineters .of a .signal^ "and 
receiving the authentication calculation result in the 
set parameters of the signal received from .the base 
station at the mobile station controller receives, 
callating the authentication calculation result in the 
set parameters of -the signal received from 'the base 
station ,with the authentication calculation result as a 
response sent from the data base, and determining that' - 
authentication confirmation is made, if a collation 
result indicates coincidence,. . 

In another aspect the invention provides 

An authentication system in a mobile communication system including 

a mobile station" having an authentication 
key used for authentication and an authentication - 

algorithm for performing an authentication 

calculation by using an authentication random number 
transmitted from a base. station and the 

authentication key as input information, 

said base station having a mechanism for 
generating an authentication random number and means for 
transmitting the authentication random number, an 
authentication calculation result obtained by 
transmitting the authentication random number to said 
mobile station, and a mobile station identification 
number to a mobile starion controller , 
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:said -.rnobiie -.station -controlier having a = mechanism (8) for .collating .an 
authentication -calculation result, '.obtained :t)y :transmitting :the 'mobile .station 
identification number and the authentication crandom number transmitted Irom 
said :base .station to ?a data base, with an authentication calculation result 
•-transmitted from said base station, and 

said data base having an authentication key (9) used for authentication, 
an authentication algorithm (10) for performing an authentication calculation by 
using the received authentication random number and the autiientication key 
as input information, and a . mechanism for sending an authentication calculation 
result. 

The invention also provides an authentication method in a mobile 
communication system characterised by assigning authentication keys and an 
authentication algorithm to mobile stations in the system; maintaining a data 
base of said keys; requesting an authentication calculation result from a said 
mobile station, using an authentication random number transmitted by a base 
station; supplying the random number and the identity of the mobile station to 
the data base; retrieving the authentication key corresponding to the mobile 
station fnDm the data base; repeating the authentication calculation using the 
retrieved key. the authentication algorithm and the random number; and 
comparing the authentication calculation result thereby obtained with the result 
received from the mobile station. 



'B'ri'e"f 'Descri-pt-lon ■ 'of -the 'Drav/ings 



■ ^ .T.ig-. '2 -is -a' .block diagrain .-showrng inf orma.tion 
.15 of -:each :cons:ti1:uent element and its mechanrsm; 

:F,ig. '2 is a /block diagram showing pieces of 
information transferred between the respective 
constituent elements ; 

Pig. 3 is a chart showing a signal sequence 
20 'between the respective constituent' elements; 

Fig. 4 is a chart showing' an initial sequence 
which is started by a mobile station controller to cause 
a base station to generate a random number; 



25 which is started by a data base to cause the base 
station to generate a random number; 



Fig. 5 is a chart showing an initial sequence 




.Fig.. '6 is :a rblock diagram :showing -pieces :o.f 
Infarmation transferred between ;the .respectiv.e 
constituent -elements when there -are two authentrcation 
targets; 

Fig. 7 is a chart showing an authentication 
sequence for an originating operation, which. is used 
conventionally; 

Fig. 8 is a chart showing a conventional 
method of storing authentication random numbers and 
authentication calculation results; and 

Fig. 9 is a chart showing a conventional 
authentication sequence. 

Description of the Preferred Embodiments 

Fig. 1 shows information of each constituent 
element of an embodiment and its mechanism according to 
the present invention. Referring to Fig. 1, a mobile " 
station 1 is possessed by a user who intends to perform 
normal transmission and incorporates an authentication 
key 5 and an authentication algorithm calculation means 
6. The authentication algorithm calculation means 6 
performs an authentication calculation by using an 
authentication random number sent from a base station 2 
and the authentication key 5 as input parameters. The 
base station 2 incorporates a random number generating 
means 7. The random number generating means 7 
independently generates an authentication random number 
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±o .be transmitted .when .an authentication request .is made 
with respect to the -mobile :station 1 . 

A mobile .station controller 3 incorporates a 
calculation result collating .means 8. The calculation 
result collating means 8 serves to collate 
authentication calculation results obtained by 
transmitting an authentication calculation request to a 
data base 4 upon setting an authentication calculation 
result sent, as a response, from the mobile station 1 
with a random number identical to an authentication 
random number transmitted to the mobile station 1 as 
authentication random numbers. 

The data base 4 incorporates an authentication 
key pool 9 and an authentication algorithm means 10. 
The authentication key pool 9 serves to store the 
authentication keys of ^ plurality of mobile stations, 
which keys can be different from each other. The 
authentication algorithm means 10 performs an 
authentication calculation by using an authentication 
random number sent from the mobile station controller 3 
and the authentication key, of a specific mobile 
station, which is obtained from the -authentication key 
pool 9 on the basis of a mobile station identification 
number simultaneously sent from the mobile station 
controller 3 as input parameters. 

Fig. 2 shows pieces of information transferred 
between the respective constituent elements. Upon 

11 



de.terminrng -that ,authentrcati-on :o'f ±he :inobi'le isxaf ion .1 
is :requixed^ the rbase rstatxon 2 :causes ±119 .xandom :nuiTiber 
generating means 7 to -autonomously generate a xandoin 
-number. 'Thereafter^ ±he 'base :s\tatlon '2 -transmits 'an 
authentication calculation reguest :signal '21 to the 
mobile station 1.. The authentication calculation 
request signal 21 has, a set parameter, the. random 
number generated as an authentication random number by 
the random number generating means 7. 

The mobile station 1 causes the authentication 
algorithm calculation means 6 to perform an 
authentication calculation using, as input parameters, 
the authentication random number contained in the 
authentication calculation request signal 21 received, 
from the base station 2 and the authentication key 5 
stored in its own station. 

Subsequently, the mobile station 1 transmits 
an authentication response signal 22 to the base station 
2, The authentication response signal 22 has, as a set 
parameter, the authentication calculation, result 
obtained by the authentication algorithm calculation 
means 6 . 

Upon reception of the authentication response 
signal 22 from the mobile station 1, the base station 2 
transmits an authentication confirmation signal 23 to 
the mobile station controller 3. The authentication 
confirmation signal 23 has, as set parameters, the 

11 



rrandoir .number ;generated ..in Its own ..station, the 
authentication calcula.ti.on result :contained in the 
authentication response signal 22, and the mobile 
station identification number indicating the mobile 
station 1 . 

Upon reception of the authentication 
confirmation signal 23 from the base station 2, the 
mobile station controller 3 transmits an authentication 
calculation request signal 24 to the data base 4. The 
authentication calculation request signal 24 has, as set 
parameters, the mobile station identification number and 
the random number contained in the signal 23 . 

Upon reception of the authentication 
calculation request signal 24 from the mobile station 
controller 3, the data base 4 accesses the 
authentication key pool 9 by using the mobile station 
identification number contained in the signal, 24 as an 
input parameter to obtain an authentication key 
associated with the mobile station identification 
number. The data base 4 then causes the authentication 
algorithm means 10 to perform an authentication 
calculation using, as input parameters, the 
authentication key and the random number contained in 
the authentication calculation request signal 24 
received from the mobile station controller 3. 

Subsequently, the data base 4 transmits an 
authentication calculation result response signal 25 to 

6 



*.the :mobile fs.tation control'ler :3-. ;.The jauihsntrcation 
calcuiation :resui-.t .-response :si-gna'l '25 :has,, -.a's ;a ;3et 
-parameter;. ±he .identification calculation :resuli: 
obtained by the authentication :algoritliin :ineans 10. 

'Upon reception of the authentication 
calculation result response signal- 25 from the data base 
4 1 the mobile station controller 3 causes the 
. calculation result collating means 8 to collate the 
authentication calculation result contained in the 
signal 25 with the authentication calculation result 
contained in the authentication confirmation signal 23 . 
previously received from the base station 2 and 
associated with the mobile station 1- If the collation 
result indicates coincidence"^ the mobile station 
controller 3 determines that the mobile station is 
valid . . 

Fig, 3 shows a signal transfer timing between 
the mobile station 1 , the base station 2, the mobile 
station controller 3; and the data base 4 and main 
parameters contained in the respective signals. When 
authentication of the mobile station 1 is required^ the 
base station 2 performs a random number generating 
operation 30, and transmits an authentication request 
signal 31 to the mobile station 1 by using the generated 
random number as a limiting parameter. The mobile 
station 1 then executes an authentication calculation 32 
by using the random number contained in the parameter. 



Af ter this opera±i-on., the mobile station :i 
-transmits an authentication -response 33 'to the :base 
station 2.. The authentication .response "3.3 has, as a set 
parameter, the identification calculation result 
obtained by the authentication calculation 32. The base 
station 2 then transmits an authentication confirmation 
signal 34 to the mobile station controller 3.. The 
authentication confirmation signal 34 has, as set 
parameters, the authentication calculation result 
contained in the parameter of the authentication 
response signal, the random number generated by' the base 
station 2, and the mobile station identification number. 

Upon reception of an authentication 
confirmation request from the base station 2, the mobile . 
station controller 3 transmits an authentication 
- calculation result request 35 to the data base 4. The 
authentication calculation. result request 35 has, as set 
parameters, the random number contained in the parameter 
and the mobile station identification number. 

Upon reception of the authentication 
calculation result request 35 from the mobile station 
controller 3, the data base 4 obtains an authentication 
key corresponding to the specific mobile station from 
the mobile station identification number contained in 
the parameter, and performs an authentication 
calculation 36 by using the authentication key and the 
random number contained in the parameter of the 
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fauthentiication ■ confirmation .xegues.t.. \The -data 'hase A 
^transmits tan vauthentica.tion .ca'lculation ;result response 
37 ±0 .the :mdbile station .controller .3 with the obtained 
authentxcation calculation .result being set as a set 
parameter.. 



calculation result response 37/ the mobile station 
controller 3 collates the .authentication calculation 
result contained in the parameter with the 
authentication calculation result contained in the 
authentication confirmation signal 34. If the collation 
result indicates coincidence, the mobile station 
controller 3 determines that the mobile station is 
valid. 



with reference to Figs.'l to 3, the possibility that the 
third person obtains an authentication number 
corresponding to a mobile station identification number 
as in the conventional authentication method can be 
reduced. In the conventional method;- the third person 
may obtain such information by intercepting a signal 
transmitted/received between the mobile station 
controller and the data base via a communication line or 
transmitting an information read request to the data 
base. 

More specifically, even if the third person, 
intercepts a signal transmitted/received between the 



Upon reception of the authentication 



By using the authentication method described 




■mobilB -station ;contro.Tler ;and the :data ibase -via -the 
■conununi-.cation .line, :onl;y .inf.orjnation which :can .be 
obtained ;is .a .combination -of 3 temporary authentication 
random number and a corlresponding -authentication 
calculation result obtained when an authentication 
request is generated with respect to a certain mobile 
station. Estimating an authentication key corresponding 
to the actual mobile station from this combination of 
" information is as difficult as intercepting' a signal 
transmitted /received between the mobile station and the . 
base station via the communication line. 

In addition, if the data base itself has no 
response function of responding to an information read, 
request from a public line but is designed to. 
exclusively receive information from an input unit 
directly connected to the data base or a specific input - 
unit connected thereto via a special line, the 
possibility that the third person obtains an 
authentication key corresponding to a mobile station 
identification number can be reduced. 

In this authentication method, when a mobile 
communication system is constructed by a plurality of 
entrepreneurs, an authentication key corresponding to a 
mobile station identification number is not transferred 
between the entrepreneurs. In the conventional 
authentication method, authentication random members and 
authentication calculation results corresponding to 
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:inobile sta.tions .iuus± be stored in :a memory unit other 
■-than the .data :ba-se ior holding authentication keys.. 
That is.-; -an addi-tional memory unit is required., 
-However, the authentication method of the present 
invention does not require this memory unit. 

Figs . 4 and 5- show, a method of stirring- random 
numbers generated by the base station 2.. Referring to 
Fig. 4, the mobile station controller 3 performs a 
random number seed generating operation 4 0 and transmits 
a random number initialization request 41 having the 
random number seed as a set parameter to the base 
station 2 . Upon reception of the random nximber 
initialization request 41, the base station 2 inputs the 
random number seed' contained in the parameter to the 
random number generating means 7 incorporated in the 
base station 2, and performs random number 
initialization 42, thus. initializing random numbers 
generated by the base station 2, 

Referring to Fig, 5, the data base 4 performs 
a random number seed generating operation 50, and 
transmits a random number initialization request 51 
having the random number seed as a set parameter to the 
mobile station controller 3. Upon reception of the 
random number initialization request 51, the mobile 
station controller 3 -inputs the random nvimber seed 
contained in the parameter to the random number 
generating means 7 incorporated .in the base station 2, 



.and perf-orms jrandoni •.number .inxtializafion 53,, .thus 
• -initiali-zing -random .numbers generated by :the .base 
station '2. 

With -.the use of the authentication method 
•5 described with reference to Figs.. 4 and 5, the following 
effect is obtained. When random numbers of the same 
values are repeatedly generated by the base station 2, 
and this phenomenon must be avoided, the. values of 
random numbers can be changed by the functions of 
0 constituent elements other than the base station. 

Fig. 6 shows pieces of information transferred 
between the respective constituent elements when a 
.mobile station includes two authentication targets. 
Upon determining that authentication of the mobile 
station having two authentication targets, i.e., 
authentication targets 61 and 62, is required, a base 
station 63 autonomously generates random numbers A and B 
by using. a random number generating mechanism 71 for the 
authentication target 61 and a random number generating 
mechanism 72 for the authentication target 62. These 
mechanisms 71 and 72 are incorporated in the mobile 
station . . ' 

Subsequently, the base station 63 transmits an 
authentication calculation request 75 to the mobile 
station with the random numbers A and B being set as 
confirmation parameters of the authentication 



.calculation request 75 vrith 'respect 'to the 
cauthen-tlcation '.targets 61 and -52. 

Upon reception of the authentication 
calculation request 75, the mobile station distributes 
the random numbers A and B .contained in the set 
parameters of the authentication calculation request 75 
to ,the authentication targets 61 and 62, respectively. 
The authentication target 61 independently obtains an 
authentication calculation result A by using a 
authentication key 57, an authentication algorithm 68, 
and the random number A- The authentication target 62 
independently obtains an authentication calculation 
result B by using an authentication key 69, an 
authentication algorithm 70, and the random number B. 
The authentication targets 61 and 6 2 then output the 
calculation results as an authentication calculation 
response result 78. 

Upon reception of the authentication 
calculation response result 78, the base station 63 
revises the authentication calculation result A, the 
random number A,- the identification number of the 
authentication target 61, the authentication calculation 
result B, the random number B, and the identification 
number of the authentication' target 6 2 as the set 
parameters of an authentication confirmation request 79, 
and transmits the authentication confirmation request 79 
to a mobile station controller 54.. 



lUpon reception -of -.the -authentication 
:confixination -request 79, :the mobile station controller 
6-4 sets the Identification .number of the authentication 
target 61 and the random number A contained in the set 
parameters of the authentication confirmation request 79 
as the revised parameters of an authentication 
calculation request BO, and also sets the identification 
number of the authentication target 62 and the random 
number B as the set parameters of an authentication 
calculation request 82, The mobile station controller 
64 then transmits the authentication calculation request 
80 and the authentication calculation request 82 to the 
authentication target 61, a data base 55, the 
authentication target 62, and a data base 66. 

Upon reception of the authentication 
calculation requests 80 and 82, the authentication, 
target 61, the data base 65, the authentication target 
52, and the data base 5 6 independently perform 
authentication calculations by using pieces of 
information contained in the respective set parameters; 
set the authentication calculation results as the set - 
parameters of authentication calculation result 
responses 81 and. 83; and transmit the responses 81 and 
83 to the mobile 'station controller 54."" 

Upon reception of the authentication 
calculation result response 81 from the authentication 
target 61 and the data base 55, the mobile station 



21 



con.trorier -64 :coriates "the •-authentication -calculation 
result contained in the :set .parameter ;v7ith ;the 
authentication .calculation .result ;a contained ;in.:the 
authentication 'confirmation request 79 .received from the 
base station 63, thereby performing authentication of 
the authentication target 61,, 

Similarly, upon reception of the 
authentication calculation result response 83 from the 
authentication target 62 and the data base "65; the 
mobile station controller 64 collates the authentication 
calculation result contained in the set parameter with 
the authentication calculation result B contained in the 
authentication confirmation request. 79 received from the 
base station 63, thereby performing authentication of 
the authentication target 62. 

With the use of the authentication method 
described with reference to Fig, 6, the following effect 
can be^obtained. Assume that a mobile station has a 
plurality of authentication targets, and authentication 
is required for the respective authentication targets. 
In this case, even if, for example, both authentication 
of the terminal unit of the mobile station and 
authentication of the user of the mobile station are 
required, authentication can be performed in the same 
procedure as described above. That is, the same effects 
as those of the authentication method described with 
reference to Figs. 1 to 3 .can be obtained. 
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•As :has:been described above, accordingio'the present:invention,:a:base 
^station generates an authentication random number and 'generates -an 
.authentication request with respect to a given. mobile station. The base station 
then -transmits the authentication random number, an ^authentication ^target 
identification number, and an authentication calculation result contained in an 
authentication response sent from the mobile . station to a mobile station, 
controller. The mobile station controller transmits the received authentication 
target identification number to a data base, and collates the obtained 
authentication calculation result with the authentication calculation result 
received from the base station, thereby performing authentication, in this 
operation, the authentication information about the authentication ta-get or the 
authentication key stored in the data base does not appear in a communication 
path between the mobile station controller and the data base. This makes it 
difficult to obtain the authentication information or authentication key by 
intercepting a signal transmitted/received via the communication path. In 
addition, this method requires no mechanism for storing a plurality of 
authentication calculation results corresponding to a plurality of authentication 
random numbers associated with a plurality of authentication targets. 

Each feature disclosed in this specification (which term includes the 
claims) and/or shown in the drawings may be incorporated in the invention 
independently of other disclosed and/or illustrated features. 
The abstract is incorporated herein by reference. 
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.An authentication rsystem in :a- mobile communication: system rincluding 

:a -Tnobrie s.tation \T) :h-aviTig .an authentica'tion 
key (5) used xor authentication and an authentication 
algorithm (6) for performing an authentication 
calculation by using an authentication random number 
transmitted from a base. station (2) and "the 
authentication key as' input information, 

said base station having a mechanism (7) for 
generating an authentication random number and means for 
transmitting the authentication random number, an 
authentication calculation result obtained by 
transmitting the authentication random number to said 
mobile station, and a mobile station identification, 
number to a mobile station controller (3), 

said mobile station controller having a 
mechanism (8) for collating an authentication 
calculation . result, obtained by transmitting the mobile 
station identification num'ber and the authentication 
random number transmitted from said base station to' a 
data base, "With an authentication calculation result 
transmitted from said base station, and 

said data base having an authentication key 
(9) used for authentication, an authentication algorithm 
(10} for performing an authentication calculation by. 
using the received authentication random number and the 

authentication key as input information, and a mechanism 
for sending an authentication calculation result. 



2. An authentication method in a mobile . comnfiuriication system .characterised by: 
assigning .authentication keys and an . authentication -algorithm itcmobiie stations :in:the 
system; maintaining -a data base of .said keys; 

requesting an authentication calculation result from a said mobile station, using an 
authentication random number transmitted by a base station; supplying the random number 
and the identity of the mobile station to the data base; retrieving the authentication key 
corresponding to the mobile station from the data base; . . 
repeating the authentication calculation using the retrieved key, the authentication 
algorithm and the random number; and 

comparing the authentication calculation result thereby obtained with the result received 
from the mobile station. 



'In .an Tau.t'hen-.t±ca:tian .sy5:t-ein including 
:a mobile .starLon (1) -having an authen.ticatiion 
key (5) used 'for aathentica.tion and an authentication 
algorithm (5) for perfcrming an authentication 
calculation by using an authentication random number 
transmitted from a base. station (2). and the 
authentication key as input information, • 

said base station having a mechanism (7) for 
generating an authentication random number and means for^ 
transmitting the authentication random number, an 
authentication calculation' result obtained by 
transmitting the authentication random number to said 
mobile station, and a mobile station identification 
number to a mobile station controller (3), 

said mobile station controller having a 
mechanism {8} for collating an authentication 
calculation result, obtained by transmitting the mobile 
station identification number and the authentication 
random number transmitted from said base station to a 
data base, with an authentication calculation result 
transmitted . from said base ' station , and 

said data base having an authentication key 

(9) used for authenticationyr an authentication algorithm 

(10) for performing an authentication calculation by 
using the received authentication random number and the . 



4. A method .according /to iClaim .3, :further comprising :the 'Step of ;generating random 
number seeds to be generated by !said base station .by .using a .constituent element other 
than said mobile station and said base station :to stir , random numbers generated by said 
base station. 

5. A method according to Claim 3, wherein said mobile station includes not less than 
one authentication target. 

6. An authentication system or method substantially as herein described with 
reference to figures 1 to 6 of the accompanying drawings. 
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